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DETAILED ACTION 

CLAIMS PRESENTED 

Claims 1-28 are presented. 

Claims 1-8, 10-17, 19-26, 28 are rejected over Pinkert (Pinkert and Wear, 
Operating Systems, Concepts, Policies, and Mechanisms, Prentice Hall, 1989, pgs 4, 
205-207) 

Claims 9, 18, 27 are rejected over Pinkert and Whitney ( 
http://www.eli.sdsu.edu/courses/sprinq99/cs696/notes/securitv/securitv.html .) 

CLAIM REJECTIONS 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 1-8, 10-17, 19-26, 28 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Pinkert (Pinkert and Wear, Operating Systems, Concepts, Policies, 
and Mechanisms, Prentice Hall, 1989, pgs 4, 205-207). 

Regarding claim 1 , Pinkert teaches "A security policy method comprising the 
steps of: associating wildcarded resource identifiers with a corresponding security policy 
(page 4, the third paragraph, i.e. resource management, guardian); and matching a 
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resource identifier received in an access request to one of a list of said wildcarded 
resource identifiers, wherein said matching is determined in accordance with a 
predetermined set of precedence values, each precedence value of said set 
corresponding to a predetermined wildcard element (pages 205-207, i.e. aliases which 
are a type of wildcarding in the sense that more than one name is used with precedence 
values)." 

These passages of Pinkert do not explicitly teach "policy" in the sense of the 

claim. 

Nevertheless, it was well known in the art to keep the consistency of various sets 
of security techniques within a system at the level of a "policy" which is a logical way of 
solving a problem, instead of explicitly implementing only one set of security techniques 
at the level of a mechanism which is an explicit implementation of such a policy - for the 
motivation of having flexibility in implementation. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to modify Pinkert for the motivation noted in the previous 
paragraphs so as to teach the claimed invention. 

Regarding claims 2-8 (various identifier handlings), such features are well known 
in the art for the motivations of convenient naming and of convenient security. 

Regarding claims 10-17, 19-26, 28, these claims are analogs of claims 1-8, 1-8, 
1 , respectively. For the reasons noted in the rejections of claims 1 -8, these claims are 
not patentable. 
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Claims 9, 18, 27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Pinkert and Whitney ( 

hUp://www.eli.sdsu.edu/courses/sprinq99/cs696/notes/securitv/securitv.htm^ 

Pinkert teaches as noted in the previous rejections. 

Whitney suggests "wherein said set of precedence values comprises: a first 
precedence value having a highest precedence corresponding to an exact character, a 
second precedence value have a next lower precedence from said first precedence 
value, corresponding to a character range; a third precedence value, having a next 
lower precedence from said second precedence value, corresponding to any character; 
a fourth precedence value, having a next lower precedence from said third precedence 
values corresponding to a repeating exact character; a fifth precedence value, having a 
next lower precedence from said fourth precedence value, corresponding to a repeating 
character range; and a sixth precedence value, having a next lower precedence from 
said fifth precedence value, corresponding to any character string, and wherein said 
sixth precedence value comprises a lowest precedence value (slide 10, section on host, 
i.e. the wildcards being used as a character range for domain name server, the 
wildcards providing precedence levels as shown in the example given in section on 
host.)" for the motivation of effectively implementing security (as noted in the front 
section on security model). 



Conclusion 
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The art made of record and not relied upon is considered pertinent to applicant's 
disclosure. The art disclosed general background. 

Points of Contact 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(571) 273-8300, (for formal communications intended for entry) 
Or: 

(571) 273-3836 (for informal or draft communications, please label "PROPOSED" or 
"DRAFT") 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Jung whose telephone number is (571 ) 272-3836 
or Greg Morse whose telephone number is (571) 272-3838. 
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